Bug#962968:

[Erik Huelsmann]

> So, ldapsearch and the python script appear to connect with "sasl_ssf=256
ssf=256" but the Perl script connects with "sasl_ssf=1 ssf=256". Why?

The cause lies in this section of the code base:
https://metacpan.org/release/EHUELS/Authen-SASL-2.1700/source/lib/Authen/SASL/Perl/GSSAPI.pm#L140-146
which says:

        # set SSF property; if we have just integrity protection SSF is set
        # to 1. If we have confidentiality, SSF would be an estimate of the
        # strength of the actual encryption ciphers in use which is not
        # available through the GSSAPI interface; for now just set it to
        # the lowest value that signifies confidentiality.
        $self->property(ssf => (($choice & 4) ? 2 : 1));

It would be absolutely perfect to get a patch to address this issue. I'd be
happy to include. Please forward the bug upstream (
https://github.com/gbarr/perl-authen-sasl) so others can learn about this
problem and/or contribute to the solution.

Thanks for reporting!


Regards,
-- 
Bye,

Erik.

http://efficito.com -- Hosted accounting and ERP.
Robust and Flexible. No vendor lock-in.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/pkg-perl-maintainers/attachments/20230924/3a771887/attachment.htm>